SideWinder APT Targets Indian Organizations via DLL Side-Loading and Fake Income Tax Portals
SideWinder APT has resurfaced with a highly targeted cyber-espionage campaign aimed at Indian organizations, abusing trusted Microsoft…
continue reading..
Nezha Malware Detection Framework: Multi-Layer Rules Covering the Full Attack Lifecycle
YARA Rules Rule 1: Nezha Core Malware Detection yara Rule 2: Nezha Installation Scripts yara Rule 3:…
continue reading..
Nezha Malware Exposed: How a Quiet Cloud-Based Threat Is Taking Control of Servers Worldwide
What Is Nezha Malware? Nezha is a powerful remote access trojan (RAT) and botnet framework that has…
continue reading..
CVE-2025-68617: A High-Severity Use-After-Free in FluidSynth
CVE-2025-68617 is a high-severity security vulnerability affecting FluidSynth, a widely used open-source software synthesizer that implements the…
continue reading..
CVE-2025-68645: Local File Inclusion Vulnerability in Zimbra Collaboration Webmail
CVE Identifier: CVE-2025-68645Disclosure Date: December 22–23, 2025Severity: High to Critical (depending on scoring system)Affected Software: Zimbra Collaboration…
continue reading..
CVE-2025-68614 – XSS in the Heart of Monitoring
CVE-2025-68614 is a stored cross-site scripting (XSS) vulnerability affecting LibreNMS, an open-source network monitoring platform widely used…
continue reading..
Part B: Hunting Frogblight: 25+ Detection Rules to Stop Turkish Android Banking Malware
Frogblight Malware Detection Rules YARA Rules Rule 1: Frogblight Core Detection yara Rule 2: Frogblight SMS Interception…
continue reading..
Part A: Frogblight Uncovered: Inside the Turkish Android Banking Trojan Targeting Court and Aid Apps
Overview: What Is Frogblight? Frogblight is a recently identified Android malware campaign that primarily targets mobile users…
continue reading..
Payroll Pirates: How Help Desk Scams Are Hijacking Paychecks
Payroll Pirate attacks are a form of scalable social engineering aimed at corporate HR and IT help…
continue reading..
